Strong authentication
PBKDF2 password hashing, configurable password policies, TOTP two-factor authentication and controlled session inactivity windows.
Security & architecture
Your people data deserves
Your people data deserves
a serious foundation.
HRlume combines modern access controls with Cloudflare-native infrastructure and an option for a fully dedicated deployment.
Application controls
Protection built into everyday workflows.
Security is part of the product, not a separate premium tier.
Identity provider support
Optional Google or Microsoft single sign-on for existing, verified employee accounts. Password sign-in remains available as a recovery path.
Least-privilege access
Fixed roles and granular custom permissions keep sensitive HR actions restricted to the people who need them.
Traceable changes
Audit history covers sensitive administrative and performance actions, creating a clearer record of what changed.
Scoped integrations
API keys are limited to the supported read-only employee, department and team scopes rather than becoming general-purpose sessions.
Private file delivery
Documents are streamed through authenticated application routes instead of being exposed through a public storage bucket.
Cloudflare-native architecture
A small, auditable stack with fewer moving parts.
The application runs as a Cloudflare Worker, stores structured data in D1 and keeps uploaded files in R2. There are no always-on application servers to patch or maintain.
Dedicated deployment
Your account. Your database. Your storage.
For organisations that require stronger infrastructure isolation, HRlume can provision a complete application instance inside the customer's own Cloudflare account.
- A dedicated Worker, D1 database and R2 bucket
- Customer-owned Cloudflare resources
- A licence bound to the new application URL
- The provisioning token is used for that request and not retained by HRlume
1
Your Cloudflare accountScoped provisioning access
2
Dedicated HRlume stackWorker · D1 · R2
3
Your HR workspaceIsolated and licensed
Security questions?
Start a conversation
Let's review your requirements together.
Tell us about your identity, access, deployment and data-isolation needs.